Can someone please explain what happens at the SP sessions, when a timeout occurs at the IDP ?
How does the SP know to redirect user to IDP to login again ?
Does the SP ping the IDP every time a request comes to it ?
Can someone please explain what happens at the SP sessions, when a timeout occurs at the IDP ?
How does the SP know to redirect user to IDP to login again ?
Does the SP ping the IDP every time a request comes to it ?
Once the user is transferred to the IdP, the session length is up to the SP. There isn't a mechanism really "built-in" to SAML, beyond the SP deciding that it needs to get a more recent authentication.